Known vulnerabilities in Red Hat Enterprise Linux 6

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-18047	Dogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slash	6.5 Medium	Jul 28, 2026
CVE-2026-17072	Gstreamer1-plugins-good: gst-plugins-good: 4-byte heap over-read in gst_matroska_parse_flac_stream_headers when parsing flac codec data in matroska containers	3.3 Low	Jul 28, 2026
CVE-2026-66759	Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images	7.1 High	Jul 27, 2026
CVE-2026-66757	Gimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi images	5.5 Medium	Jul 27, 2026
CVE-2026-66758	Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images	7.8 High	Jul 27, 2026
CVE-2026-15003	Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service	5.6 Medium	Jul 27, 2026
CVE-2026-17523	In the Linux kernel, the following vulnerability has been resolved: can: bcm: switch timer to HRTIMER_MODE_SOFT and…	7.8 High	Jul 27, 2026
CVE-2026-66337	Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until()	6.5 Medium	Jul 24, 2026
CVE-2026-66338	Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked()	5.4 Medium	Jul 24, 2026
CVE-2026-66339	Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels	6.5 Medium	Jul 24, 2026
CVE-2026-17039	Pki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment path	3.1 Low	Jul 24, 2026
CVE-2026-16768	Gdk-pixbuf: out-of-bounds read in ico parser	5.3 Medium	Jul 23, 2026
CVE-2026-6390	Nano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling.	6.8 Medium	Jul 23, 2026
CVE-2026-16560	389-ds-base: 389-ds-base: heap-buffer-overflow in rdn_av_swap on quoted multivalued rdn	5.3 Medium	Jul 22, 2026
CVE-2026-16517	Libarchive: libarchive: signed integer overflow in archive_write_zip_header	2.9 Low	Jul 21, 2026
CVE-2026-16445	Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module	7.5 High	Jul 21, 2026
CVE-2026-12080	Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys	7.3 High	Jul 20, 2026
CVE-2026-15588	Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering	5.3 Medium	Jul 20, 2026
CVE-2026-3842	A flaw was found in QEMU	7.8 High	Jul 16, 2026
CVE-2026-15779	Samba-winbind: samba: pam_winbind mkhomedir chowns critical system paths without validation	6.1 Medium	Jul 15, 2026
CVE-2026-15714	Libsoup: soupmultipartinputstream: libsoup: out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string	6.5 Medium	Jul 14, 2026
CVE-2026-15713	Libsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leak	5.9 Medium	Jul 14, 2026
CVE-2026-15711	Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation	7.5 High	Jul 14, 2026
CVE-2026-15709	Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service	7.5 High	Jul 14, 2026
CVE-2026-12478	Libsoup: incomplete fix for cve-2026-0716: out-of-bounds read in libsoup websocket frame processing (unmasked path)	4.8 Medium	Jul 14, 2026

Other Red Hat products